Attack-resistant trust metric